PT-2012-4089 · Microsoft · Office Compatibility Pack+3

Published 2012-12-11 · Updated 2025-04-07 · CVE-2012-2539

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2003 SP3, 2007 SP2 and SP3, and 2010 SP1 Word Viewer Office Compatibility Pack versions SP2 and SP3 Office Web Apps 2010 SP1

Description A remote code execution issue exists in the way affected Microsoft Office software parses specially crafted Rich Text Format (RTF) data, potentially allowing an attacker to take complete control of an affected system. This could enable the attacker to install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system may be less impacted than those operating with administrative user rights.

Recommendations For Microsoft Word 2003 SP3, update to a version that is not affected by this issue. For Microsoft Word 2007 SP2 and SP3, update to a version that is not affected by this issue. For Microsoft Word 2010 SP1, update to a version that is not affected by this issue. For Word Viewer, update to a version that is not affected by this issue. For Office Compatibility Pack SP2 and SP3, update to a version that is not affected by this issue. For Office Web Apps 2010 SP1, update to a version that is not affected by this issue. As a temporary workaround, consider avoiding the use of crafted RTF data until a patch is available.

Fix

DoS

RCE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2012-2539

Affected Products

Office Word

Office Compatibility Pack

Office Web Apps

Word Viewer

References · 10

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2539 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-2539 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-079 · Vendor Advisory
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2539 · Note
• https://t.me/cvenotify/85575 · Telegram Post
• http://us-cert.gov/cas/techalerts/TA12-346A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16073 · Note
• https://t.me/cvenotify/118082 · Telegram Post
• http://technet.microsoft.com/en-us/security/bulletin/ms12-079 · Note